Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B1748E09B7F11EFA761D69C762E951A.roa
File: 8B1748E09B7F11EFA761D69C762E951A.roa (raw, json)
Hash identifier: ZNUCs9t4KizC34cq+8zn0ofKTL33H1tqtNr51sLgQWI=
Subject key identifier: 4F:15:AA:1C:52:45:EA:CA:F4:68:12:C0:F6:C2:62:46:2C:EE:4F:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CE9B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B1748E09B7F11EFA761D69C762E951A.roa
Signing time: Tue 05 Nov 2024 14:09:17 +0000
ROA not before: Tue 05 Nov 2024 14:09:13 +0000
ROA not after: Mon 13 Jan 2025 14:09:13 +0000
asID: 7018
IP address blocks: 156.246.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52891 (0xce9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 14:09:13 2024 GMT
Not After : Jan 13 14:09:13 2025 GMT
Subject: CN=672a270d-c5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:3a:a2:24:42:d1:05:ab:1e:c1:16:df:62:
c0:99:f0:45:38:f3:8c:23:dc:a8:ae:e3:9f:34:a0:
52:6a:a6:25:e8:b4:af:af:d3:d3:16:42:ab:2a:93:
ea:ed:bd:99:3b:76:41:0f:36:3d:42:4b:c8:46:88:
39:21:08:b1:1b:88:37:23:6a:c5:89:a9:ad:23:73:
72:b2:50:49:9b:67:2d:80:71:50:b1:03:ae:74:1d:
2a:94:31:bb:50:0e:04:76:7b:40:bc:62:9b:81:db:
07:f6:10:4e:18:8f:98:f7:ac:41:88:bc:9f:13:d3:
a4:43:a5:3a:84:2f:d6:ed:7d:35:f4:6e:65:3c:d8:
5a:8f:4f:26:2a:2c:1a:b2:5b:fb:62:dd:7b:38:96:
e5:8b:e5:cf:6d:79:94:45:6a:fd:1b:6b:81:e5:2d:
c9:33:71:d0:33:28:e3:7a:88:eb:a8:ca:06:33:ee:
7d:b2:42:05:4f:ed:85:1c:6d:e9:81:04:c2:ba:8a:
05:6f:86:f3:09:1e:6b:f1:70:88:b8:ca:eb:38:cd:
76:31:e1:a1:81:ad:b6:8a:2a:e8:ab:bb:61:1d:59:
97:86:10:a0:34:5a:b3:22:ff:af:e8:1f:53:13:7a:
f1:00:fd:d3:cb:52:98:5b:3b:77:d0:6e:b8:c8:e5:
19:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:15:AA:1C:52:45:EA:CA:F4:68:12:C0:F6:C2:62:46:2C:EE:4F:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B1748E09B7F11EFA761D69C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.26.0/23
Signature Algorithm: sha256WithRSAEncryption
69:11:60:c0:8d:b2:59:2d:26:d8:36:88:f8:e6:1b:54:11:a9:
1e:87:f8:94:9c:bd:ba:37:34:a5:8b:27:22:41:b9:b3:92:2d:
53:9b:86:7d:42:24:2d:63:f5:2d:a0:4d:4b:29:35:0a:ee:bd:
b0:a7:01:c8:1c:0f:78:2d:a0:ba:f9:62:ce:54:70:e8:3e:8f:
3b:ba:73:2d:f9:16:82:fc:3e:be:a9:32:a9:a3:b0:f3:37:b8:
c8:be:99:4e:1b:07:e1:29:c7:68:39:23:50:db:38:5c:3f:55:
fb:d3:e0:93:9e:e7:56:a9:25:51:9f:71:1e:a0:11:07:fc:56:
3d:df:14:d4:35:5b:0a:58:65:11:00:59:e1:7f:54:89:c0:f6:
4a:33:c3:b6:08:77:ac:c3:61:6f:b1:ca:41:ae:ad:cb:b3:e9:
0a:9e:ed:ed:f8:8c:10:ca:74:02:50:1a:fa:4a:1e:38:dd:98:
9e:eb:ef:52:8f:42:ca:4d:95:37:f6:7d:65:aa:5b:ee:20:61:
01:15:f5:65:c7:32:17:9f:74:57:05:65:81:ea:3a:d3:67:66:
60:e0:f5:92:86:5b:e6:bd:06:af:94:c5:df:a1:a9:2d:0e:04:
b5:a4:41:f3:8e:fd:c4:37:28:19:ee:84:4b:24:e5:1d:18:a9:
2c:66:97:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:38 2024 by rpki-client on console-fra.rpki-client.org